39 of 42
ContentsAppendix C

Appendix CCheck yourself

Your data

Four quick questions about where your words go. Tap an answer to see why.

Check yourself

Real: your answers stay in this page; nothing is stored or sent
  1. A tool says it's "HIPAA-ready." Does that make any use of it compliant?

  2. You pay for a premium personal plan. Is it now an organization account?

  3. A connector sends your file to another company's app. Whose terms cover it there?

  4. Is properly de-identified health data still PHI?

Notes (5)
  1. 1U.S. Department of Health & Human Services, “Guidance on HIPAA & Cloud Computing,” HHS.gov, last reviewed December 23, 2022, https://www.hhs.gov/hipaa/for-professionals/special-topics/cloud-computing (accessed October 26, 2026).
  2. 2Anthropic, “HIPAA-ready Enterprise plans,” Claude Help Center, https://support.claude.com/en/articles/13296973-hipaa-ready-enterprise-plans (accessed October 26, 2026).
  3. 3Anthropic, “Updates to our consumer terms,” August 28, 2025, https://www.anthropic.com/news/updates-to-our-consumer-terms (accessed October 26, 2026).
  4. 4Anthropic, “Business Associate Agreements (BAA) for Commercial Customers,” Anthropic Privacy Center, https://privacy.claude.com/en/articles/8114513-business-associate-agreements-baa-for-commercial-customers (accessed October 26, 2026).
  5. 5U.S. Department of Health & Human Services, “Guidance Regarding Methods for De-identification of Protected Health Information,” HHS.gov, last reviewed February 3, 2025, https://www.hhs.gov/hipaa/for-professionals/special-topics/de-identification (accessed October 26, 2026).

Appendix C · page 2 of 3

Turn pages with the ← and → keys.

Cite this page

Using this book

© 2026 Steve Sparks. All rights reserved. You're welcome to quote short passages and cite any page, with a link back. To reuse diagrams or larger parts, ask through GitHub.

Quoted material and figures from other sources remain their owners'.